$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/76405e29-1a58-35b3-af1b-375f300be6e8.roa File: 76405e29-1a58-35b3-af1b-375f300be6e8.roa (raw, json) Hash identifier: QYFj6ezy8ImQH641xRe8QO/47e/PeU+lcBoCWWQiZ8c= Subject key identifier: F0:34:63:DD:F6:01:86:FC:83:D3:75:08:7F:2E:2E:36:ED:53:12:C6 Certificate issuer: /CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2 Certificate serial: 010D0C9F4328584F0809E5A8DD0B0739FB7B8A30 Authority key identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/76405e29-1a58-35b3-af1b-375f300be6e8.roa Signing time: Tue 01 Sep 2026 14:41:51 +0000 ROA not before: Tue 01 Sep 2026 14:41:51 +0000 ROA not after: Mon 30 Nov 2026 15:41:51 +0000 asID: 834 IP address blocks: 142.248.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:09:e5:a8:dd:0b:07:39:fb:7b:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2 Validity Not Before: Sep 1 14:41:51 2026 GMT Not After : Nov 30 15:41:51 2026 GMT Subject: CN=00def8c4-6e00-488f-8f9a-9e4d52bd845a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:95:9f:9b:fc:d1:d8:b2:f7:fe:02:2b:59: d5:94:86:4f:d6:bc:24:44:76:57:7b:7b:70:34:9c: 60:e6:e9:c8:65:c5:c9:78:d2:12:8b:a5:b0:93:cd: 5a:ac:4c:bb:d7:fa:2c:da:15:5c:d3:b5:79:a4:e3: d5:de:fb:e5:5b:56:da:8c:06:ec:29:18:24:e9:e0: e3:fa:0c:9d:98:61:48:c6:e2:55:e0:07:cd:61:b8: 9e:fd:1a:46:b6:8a:9f:7a:16:12:b7:1d:98:70:c1: a6:a8:da:d2:fe:d6:ab:84:39:f6:ef:53:d6:a9:c7: f7:f9:92:4b:9e:e2:94:44:3f:63:8a:19:38:18:98: 42:b5:56:61:28:12:f0:84:17:af:dd:d2:55:17:b2: a0:ea:3c:73:88:8d:87:4f:50:1d:21:0e:9d:6e:e3: c9:3f:d4:51:4b:20:46:15:6a:f9:2c:7f:f1:9a:32: 61:12:7e:d8:d8:16:ff:76:7a:e3:07:0e:dc:46:dd: fe:72:2a:6d:e0:07:0f:15:8d:c4:29:eb:b9:7d:2c: 40:a1:b0:87:2e:58:31:39:8f:7b:d6:24:f7:c3:1f: 11:78:c3:92:01:dc:93:74:89:91:51:d5:e6:ba:e3: 2c:d6:ca:85:f7:5c:b8:14:84:ac:be:6e:bd:f2:7c: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:63:DD:F6:01:86:FC:83:D3:75:08:7F:2E:2E:36:ED:53:12:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/76405e29-1a58-35b3-af1b-375f300be6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.crl X509v3 Authority Key Identifier: keyid:84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:aa:5a:b2:b6:36:61:73:2c:b6:26:db:d0:d6:13:3f:30:9c: c7:01:f3:d1:d6:2c:ec:27:22:5d:58:43:16:e4:10:f6:5b:bd: 27:01:fe:ac:bb:25:38:2e:38:66:aa:29:2c:bd:aa:35:19:da: e2:04:f4:2e:39:cf:f4:be:21:6c:a7:3c:3c:21:1b:30:4f:50: a5:97:55:32:0e:ad:ac:f0:32:02:c9:fb:a3:d1:e2:b5:99:1a: 29:b3:88:d4:f4:6b:fa:2f:1a:73:91:ce:89:be:89:e2:5a:ba: 69:3f:b4:97:a2:ba:98:0c:c2:12:5d:da:e8:03:57:8c:dc:08: e9:e1:e9:4f:70:30:0c:93:44:35:20:f9:3b:98:12:37:74:45: 71:1f:76:12:5e:c6:3b:f4:b7:0e:d1:38:a0:83:8b:fe:71:a9: 97:45:02:40:b6:18:b9:56:03:34:fa:7f:32:78:b3:9f:a3:ce: fa:1f:04:a8:44:ac:3f:da:70:5e:76:c2:52:86:3d:20:a2:17: 58:0d:8c:21:73:e8:33:f5:96:c4:fc:57:db:37:8f:e7:d1:b7: 76:54:f0:4a:fe:c3:cb:aa:54:8d:ca:d0:d7:1c:dd:63:d3:13: bd:a7:8d:7d:13:32:74:e9:69:c9:7a:2e:52:24:d9:0d:a7:6f: 4a:2f:e5:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8ICeWo3QsHOft7ijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlOWQ4ZjAtOGIxZC00ODBkLWJjOWUtNzcwY2VjZDRj OGYyMB4XDTI2MDkwMTE0NDE1MVoXDTI2MTEzMDE1NDE1MVowLzEtMCsGA1UEAxMk MDBkZWY4YzQtNmUwMC00ODhmLThmOWEtOWU0ZDUyYmQ4NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWOVn5v80diy9/4CK1nVlIZP1rwkRHZXe3tw NJxg5unIZcXJeNISi6Wwk81arEy71/os2hVc07V5pOPV3vvlW1bajAbsKRgk6eDj +gydmGFIxuJV4AfNYbie/RpGtoqfehYStx2YcMGmqNrS/tarhDn271PWqcf3+ZJL nuKURD9jihk4GJhCtVZhKBLwhBev3dJVF7Kg6jxziI2HT1AdIQ6dbuPJP9RRSyBG FWr5LH/xmjJhEn7Y2Bb/dnrjBw7cRt3+cipt4AcPFY3EKeu5fSxAobCHLlgxOY97 1iT3wx8ReMOSAdyTdImRUdXmuuMs1sqF91y4FISsvm698nzMhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA0Y932AYb8g9N1CH8uLjbtUxLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZGU5 ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNkNGM4ZjIvNzY0MDVlMjktMWE1OC0z NWIzLWFmMWItMzc1ZjMwMGJlNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWRlOWQ4ZjAtOGIxZC00ODBkLWJj OWUtNzcwY2VjZDRjOGYyLzFkZTlkOGYwLThiMWQtNDgwZC1iYzllLTc3MGNlY2Q0 YzhmMi5jcmwwHwYDVR0jBBgwFoAUhLOvD1feV6w6blQFbx0miLuHKZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBj ZWNkNGM4ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvg+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaqWrK2NmFzLLYm29DWEz8wnMcB89HWLOwnIl1YQxbkEPZbvScB/qy7 JTguOGaqKSy9qjUZ2uIE9C45z/S+IWynPDwhGzBPUKWXVTIOrazwMgLJ+6PR4rWZ GimziNT0a/ovGnORzom+ieJaumk/tJeiupgMwhJd2ugDV4zcCOnh6U9wMAyTRDUg +TuYEjd0RXEfdhJexjv0tw7ROKCDi/5xqZdFAkC2GLlWAzT6fzJ4s5+jzvofBKhE rD/acF52wlKGPSCiF1gNjCFz6DP1lsT8V9s3j+fRt3ZU8Er+w8uqVI3K0Ncc3WPT E72njX0TMnTpacl6LlIk2Q2nb0ov5fg= -----END CERTIFICATE-----Generated at Mon Sep 21 16:57:29 2026 by rpki-client